Contributed by sean on from the OMG-OCF dept.
The OpenBSD Cryptographic Framework (OCF), presented at USENIX 2003 by Angelos Keromytis, Jason Wright and Theo de Raadt, is a key feature in the latest release of 6Wind's embedded Linux network stack.
OCF is a service virtualization layer implemented inside the kernel that provides uniform access to accelerator functionality by hiding card-specific details behind a carefully-designed API. Specifically /dev/crypto which abstracts various crypto functions and offloads them to the various supported devices (should they exist) such as the hifn.
According to 6Wind, their 6WINDGateTM 2.8 release "features a unique `fast-path-ready' software architecture supporting the OCF standard, which has been adopted by leading processor vendors for IPsec hardware crypto-accelerator."
Read more from the original paper:
Edit: A representative of 6Wind requested I update the name Wingate to 6WINDGateTM.
(Comments are closed)